Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing.
Incorrect Authorization vulnerability in Drupal Inline Entity Form Dialog allows Forceful Browsing. This issue affects Inline Entity Form Dialog versions: from 0.0.0 to 1.0.6.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Drupal
- Product
- Inline Entity Form Dialog
- Weakness
- CWE-863
- Exposure class
- Web platform
- NVD status
- Received
Why it ranks 7 (Routine)
- Product class: web platform
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.